CVE-2014-6759

The Downton Abbey Fan Portal Android app (com.downton.abbey.fan.portal) version 1.0 does not verify SSL X.509 certificates, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: lack of certificate validation. Impact: confidentiality of d...